CVE-2019-17124

This exploit leverages an authenticated RCE vulnerability in Kramer VIAware 2.5.0719.1034 by writing arbitrary commands to a CGI script and executing them. It requires admin credentials to authenticate and then interacts with the target via HTTP requests.

This repository provides a detailed technical analysis of CVE-2019-17124, a remote code execution vulnerability in KRAMER VIAware 2.5.0719.1034. The vulnerability arises from improper session validation in the `browseSystemFiles.php` endpoint, allowing unauthenticated users to write arbitrary files to the server, including executable scripts in the Apache CGI-bin directory, leading to RCE with SYSTEM privileges.